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Abstract 

In  this  paper  we  consider  the  Cayley  graph  G/  associated  to  a 
Boolean  function  /  and  we  use  it  to  investigate  some  of  the  cryp¬ 
tographic  properties  of  /.  We  derive  necessary  (but  not  sufficient) 
conditions  for  a  Boolean  function  to  be  bent.  We  also  find  a  com¬ 
plete  characterization  of  the  propagation  characteristics  of  /  using  the 
topology  of  its  associated  Cayley  graph  G/.  Finally,  some  inequali¬ 
ties  between  the  cardinality  of  the  spectrum  of  G/  and  the  Hamming 
weight  of  /  are  obtained,  and  some  problems  are  raised. 


1  Introduction  and  Motivation 

In  this  paper  we  will  concentrate  on  a  new  technique  for  dealing  with  Boolean 
functions.  The  technique  has  already  been  used  successfully  to  find  a  char¬ 
acterization  of  Boolean  bent  functions  in  terms  of  spectrum  of  the  Cayley 
graph  Gf  associated  to  /.  Here,  we  will  completely  describe  the  propagation 
characteristics  of  the  Boolean  function  /  using  the  spectrum  of  the  associ¬ 
ated  Cayley  graph,  we  find  some  necessary  conditions  for  a  function  to  be 
bent,  and  show  some  inequalities  (albeit,  far  from  being  tight)  connecting 
the  Hamming  weight  of  /,  the  dimension  of  the  vector  space  where  /  is 
defined,  and  the  cardinality  of  the  spectrum  of  Gf. 

Let  Vn  be  the  vector  space  of  dimension  n  over  the  two  element  field 
IF 2  (=  Vi).  Let  us  denote  the  addition  operator  over  IF2  by  0,  and  the  direct 
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product  by  A  Boolean  function  f  on  n  variables  is  a  mapping  from  Vn 
into  Vi,  that  is,  a  multivariate  polynomial  over  F2, 

n 

f(xi,  ■  ■  ■  ,xn)  =  ao©^aiXj©  Y  a^XiXj  ©  . . .  ©  ai2...nxix2  •  •  •  xn,  (1) 

i= 1  l<i<j<n 

where  the  coefficients  a 0,  a*,  , . . . ,  oi2...n  £  F2.  This  representation  of  /  is 
called  the  algebraic  normal  form  (ANF)  of  /.  The  number  of  variables  in  the 
highest  order  product  term  with  nonzero  coefficient  is  called  the  algebraic 
degree,  or  simply  the  degree  of  /.  We  make  the  convention  that  for  all 
matrices  and  vectors  the  indexing  starts  from  0. 

For  a  Boolean  function  on  V„,  let  17/  =  {x  £  Vn  |  /(x)  =  1}.  We  denote 
by  (17/)  the  space  of  the  0,1  sequences  generated  by  17/,  and  by  dim(!7/) 
its  dimension.  The  cardinality  of  17/  is  wtff ),  called  the  Hamming  weight 
of  /.  The  Hamming  distance  between  two  functions  /,  g  :  Yn  — >  Vi  is 
d(f,  g)  =  wt(f  ©  g).  A  Boolean  function  /(x)  is  called  an  affine  function  if 
its  algebraic  degree  is  1.  If,  in  addition,  ao  =  0  in  (1),  then  /(x)  is  a  linear 
function.  The  nonlinearity  of  a  function  /,  denoted  by  IV/,  is  defined  as 


min  d(f,  (j>), 

<f>dz.An 

where  An  is  the  class  of  all  affine  functions  on  Vn.  We  say  that  /  satisfies 
the  propagation  criterion  (PC)  with  respect  to  c  if 

Y  /(x)  ®  /(x  ® c)  =  2n~1-  (2) 

xeV„ 


If  /  satisfies  the  PC  with  respect  to  all  vectors  of  weight  1,  /  is  called  an 
SAC  ( Strict  Avalanche  Criterion)  function.  If  the  above  relation  holds  for 
any  c  with  wt( c)  <  s,  we  say  that  /  satisfies  PC(s),  and  if  s  =  n,  then 
we  say  that  /  is  a  bent  function.  Recall  that  the  Hamming  weight  of  bent 
functions  is  2n~ 1  ±  2n/2-1  (n  even),  and  they  attain  maximum  nonlinearity, 
namely  2n^1  —  2n/2-1  (cf.  [14]).  The  correlation  value  between  g  and  h 
(both  are  defined  on  Yn)  is 


c(g,  0  =  1- 


d{g ,  h) 
2n~1 


We  define  the  Walsh  transform  of  a  function  /  on  Yn  to  be  the  map 
W(f)  :  ¥n  — >  R,  W(/)(w)  =  /(x)( — l)wx,  which  defines  the  coef¬ 

ficients  of  /  with  respect  to  the  orthonormal  basis  of  the  group  characters 
Qw(x)  =  (-l)w  x.  In  turn,  /(x)  =  2"n  Ew  IP(/)(w)(-l)w  x. 
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A  graph  is  regular  of  degree  r  (or  r-regular)  if  every  vertex  has  degree  r 
(number  of  edges  incident  to  it).  We  say  that  an  r-regular  graph  G  with  pa¬ 
rameters  (v,  r,  d,  e )  is  a  strongly  regular  graph  (srg)  if  there  exist  nonnegative 
integers  e,  d  such  that  for  all  vertices  u,  v  the  number  of  vertices  adjacent 
to  both  u,  v  is  e,  d,  if  u,v  are  adjacent,  respectively,  nonadjacent. 

An  easy  counting  argument  shows  that  r(r  —  d  —  1)  =  e(v  —  r  —  1).  The 
complementary  graph  G  of  the  strongly  regular  graph  G  is  also  strongly 
regular  with  parameters  (v,  v  —  r  —  1,  v  —  2r  +  e  —  2,  v  —  2r  +  d). 

Let  /  be  a  Boolean  function  on  Vn.  We  define  the  Cayley  graph  of  /  to 
be  the  graph  Gf  =  (Vn,  Ef)  whose  vertex  set  is  Yn  and  the  set  of  edges  is 
defined  by 

Ef  =  {(w,  u)  €  Vn  |  /( w  ©  u)  =  1}. 

The  adjacency  matrix  Af  is  the  matrix  whose  entries  are  At  j  =  f(b(i)  © 
b(j)),  where  b(-)  is  the  binary  representation  of  the  argument.  It  is  simple 
to  prove  that  Af  has  the  dyadic  property:  A,^  =  Ai+2k- ij+2k-i-  Also,  from 
its  definition  we  derive  that  Gf  is  a  regular  graph  of  degree  wtff)  = 

(see  [12,  Chapter  3]  for  further  definitions). 

Given  a  graph  /  and  its  adjacency  matrix  A,  the  spectrum  Spec(Gf)  is 
the  set  of  eigenvalues  of  A  (called  also  the  eigenvalues  of  Gf).  All  of  our 
theorems  will  assume  that  Gf  is  connected.  One  can  show  easily  that  all 
connected  components  of  Gf  are  isomorphic  (we  shall  point  out  from  time 
to  time  what  changes  in  our  arguments  in  case  Gf  is  not  connected). 

We  observe  that  a  strongly  regular  graph  is  essentially  the  same  as  an 
association  scheme  of  class  2  (see  [11,  18]  and  the  references  therein).  In 
spite  of  their  (apparently)  strict  arithmetics  nature,  strongly  regular  graphs 
are  difficult  to  investigate.  P.J.  Cameron  [7]  mentions  that  “ Strongly  regular 
graphs  lie  on  the  cusp  between  highly  structured  and  unstructured.  For  exam¬ 
ple,  there  is  a  unique  strongly  regular  graph  with  parameters  (36;  10;  4;  2),  but 
there  are  32548  non-isomorphic  graphs  with  parameters  (36;  15;  6;  6).  (The 
first  assertion  is  a  special  case  of  a  theorem  of  Shrikhande  (our  note  [23]), 
while  the  second  is  the  result  of  a  computer  search  by  McKay  and  Spence 
(our  note  [19]).)  In  the  light  of  this,  it  will  be  difficult  to  develop  a  theory 
of  random  strongly  regular  graphs F . 

The  complete  determination  for  the  class  of  bent  function  is  still  an  open 
problem.  This  type  of  function  is  relevant  to  cryptography,  cf.  [21]  (although 
balancedness  is  often  required,  and  bent  functions  are  not  balanced,  if  n  > 
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20,  the  difference  2”/2"1  between  bent  functions’  weights  and  the  weight 
2n~1  of  balanced  functions  is  negligible  and  cannot  be  used  in  attacks  [10]); 
algebraic  coding  theory  (Kerdock  codes  are  constructed  from  quadratic  bent 
functions  [20]);  sequences  [22];  design  theory  (any  difference  set  will  render 
a  symmetric  design,  cf.  [2,  pp.  274-278]). 

As  bent  Boolean  functions  are  as  elusive  as  the  strongly  regular  graphs, 
perhaps  it  is  then  not  surprising  that  there  should  be  some  connections 
between  graph  theory  and  Boolean  functions.  In  fact,  they  are  more  related 
than  one  could  initially  guess,  as  we  shall  see  next.  The  attempt  in  the 
present  paper  (and  in  a  few  other  works,  see  [3,  4,  5])  is  to  push  further  the 
connection  between  two  very  intriguing  topics,  bent  functions  and  strongly 
regular  graphs,  with  the  hope  that  the  investigation  will  shed  more  light 
into  the  constructions  of  both.  We  would  like  to  invite  researchers  in  these 
two  areas  to  collaborate  for  the  benefit  of  all  parties. 

2  Known  Results 

Here  and  throughout  we  assume  that  n  >  4.  The  following  theorem  is  a 
compilation  of  various  results  in  [3]  (we  slightly  changed  the  notations). 

Theorem  2.1.  The  following  statements  hold: 

(i)  Let  f  :  Yn  —>  F2,  and  let  A*,0  <  i  <  2n  —  1  be  the  eigenvalues  of  its 
associated  Cayley  graph  Gf.  Then  A*  =  W(f)(b(i)),  for  any  i. 

(ii)  The  multiplicity  of  the  largest  spectral  coefficient  of  f,  W(/)(b(0)), 
is  equal  to  2 _ 

(Hi)  If  Gf  is  connected,  then  f  has  a  spectral  coefficient  equal  to  —wt(f) 
if  and  only  if  its  Walsh  spectrum  is  symmetric  with  respect  to  zero. 

(■ iv )  The  number  of  nonzero  spectral  coefficients  is  equal  to  rk(Aj),  the 
rank  of  Af,  which  satisfies  2d2  <  rk(Af)  <  Yli=i  (”)  (^2,  respectively, 
d  is  the  degree  of  f  over  ¥2,  respectively  RJ. 

It  is  known  (see  [12,  pp.  194-195])  that  a  connected  r-regular  graph  is 
strongly  regular  iff  it  has  exactly  three  distinct  eigenvalues  Ao  =  r,  Ai,  A2  (so 
e  =  r  +  A1A2  +  Ai  +  A2,  d  =  r  +  A1A2).  The  following  result  is  known  [12, 
Th.  3.32,  p.  103]. 
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Proposition  2.1.  The  following  identity  holds  for  a  strongly  r-regular  graph: 

A2  =  (d  —  e)A  +  (r  —  e)I  +  eJ, 
where  J  is  the  all  1  matrix. 


3  Odd  cycles  and  bent  functions 


One  can  infer  from  [3],  [4]  and  Proposition  2.1  the  following  result. 

Theorem  3.1.  Bent  functions  (onYn,  with  n  even)  are  the  only  functions 
whose  associated  Cayley  graph  is  a  strongly  regular  graph  with  the  addi¬ 
tional  property  e  =  d.  The  eigenvalues  of  G  are  X±  =  =  wtff),  A3  = 

— A2  =  — —  e,  of  multiplicities  m\  =  1,  m2  =  ^  |  ^ 

J\nf\-e(2ri-i)+\nf\  ..  ,  „ 

m 3  =  — —  o  —j |  =  |  = - — .  Moreover,  the  adjacency  matrix  satisfies 

A2  =  ^2n_1  ±  2n/2”1  -  ej  I  +  eJ, 
for  some  choice  of  the  ±  sign. 


It  is  assumed  above  that  Gj  is  connected.  If  it  is  not  connected,  then 
the  multiplicities  must  be  multiplied  by  2n_dim^/)  (since  the  connected 
components  of  G  are  isomorphic). 

A  graph  G  =  (V(G),E(G))  is  bipartite  if  the  vertex  set  V(G)  can  be 
partitioned  into  two  sets  V\ ,  V2  in  such  a  way  that  no  two  vertices  from  the 
same  set  are  adjacent.  The  following  result  is  well-known  (see  [1]). 

Theorem  3.2.  The  following  statements  are  equivalent  for  a  graph  G: 

(i)  G  is  bipartite. 

(ii)  G  has  no  cycles  of  odd  length. 

(in)  Every  subgraph  H  of  G  has  at  least  \V(H)\/2  mutually  non-adjacent 
vertices. 

(iv)  The  spectrum  of  G  is  symmetric  with  respect  to  0,  that  is,  if  X  is  an 
eigenvalue,  then  —X  is  also  an  eigenvalue. 


We  can  prove  now 
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Theorem  3.3.  The  Cayley  graph  associated  to  a  bent  function  is  not  bipar¬ 
tite. 

Proof.  Theorem  3.2  implies  that  the  graph  Gf  associated  to  a  Boolean 
function  /  is  bipartite  if  and  only  if  its  spectrum  is  symmetric  with  re¬ 
spect  to  the  origin.  But  according  to  Theorem  3.1,  that  is  impossible  since 
— Ai  =  — wt(f )  is  not  an  eigenvalue  of  G.  The  theorem  is  proved.  □ 

As  stated  in  Theorem  3.2,  a  graph  is  bipartite  if  and  only  if  it  contains 
no  cycles  of  odd  length.  Thus,  if  /  is  bent  then  the  associated  Cayley  graph 
contains  a  cycle  of  odd  length.  One  can  get  more  precise  results. 

Theorem  3.4.  Let  n  >  4.  If  Gf  is  triangle-free,  then  f  is  not  bent. 

Proof.  For  a  contradiction,  assume  that  /  is  bent.  Erdos  and  Sos  proved  in 
1974  (cf.  [1] ) ,  that  a  triangle-free  graph  G  on  p  vertices  with  minimum  degree 
5(G)  >  2p/5  is  bipartite.  Recall  that  Gf  is  a  regular  graph  of  degree  \Llf  \  of 
order  p  =  2n.  Since  n  >  4,  then  2n/2  >  5  is  equivalent  to  5(2n_1  —  2n/2-1)  > 
2n+1,  which  implies  \Qf\  =  wt(f )  >  2n+1/5.  Thus,  G  is  bipartite.  That 
is  certainly  false  by  Theorem  3.3,  contradicting  our  assumption  that  /  is 
bent.  □ 

In  the  previous  proof  it  is  sufficient  to  assume  that  Gf  is  regular  of  degree 
greater  than  2n+1/5  (if  the  degree  is  <  2n+1/5,  then  the  function  is  certainly 
not  bent). 

A  more  constructive  argument  that  shows  Theorem  3.4  would  be  the 
following.  Assume  that  /  is  bent.  One  may  replace  /  by  its  complement, 
also  bent  (cf.  [14]),  so  we  assume  that  the  constant  term  ao  =  0  in  equation 
(1).  Next,  we  prove  that  there  exist  triangles  in  Gf.  By  Theorem  3.1,  Gf  is 
strongly  regular.  Lemma  8  of  [3]  shows  that  e  =  |(x  0  Llf)  n  (y  ©  fl/)|  >  1. 
Applying  this  for  x  =  0  and  an  arbitrary  vector  y  £  Llf,  implies  that 
e  =  \Llf  0  (y  0  Llf)\  >  1.  That  is,  there  exists  z  £  Llf  such  that  y  ©  z  £  Llf. 
Thus,  /( y©z)  =  /( z)  =  /( y)  =  1.  It  follows  that  0,y,z  is  a  triangle  in  Gf. 

The  converse  of  Theorem  3.4  is  not  true,  as  it  can  be  seen  by  considering 
on  ¥6  the  function  f(x\,  X2,  X3,  X4,  X5,  xq)  =  X1X2X3  ©  £2X3X4  ©  X3X4X5  © 
£4X5X6©  £5X6^1  ®xe,x\X2  and  the  associated  Cayley  graph  which  has  plenty 
of  triangles,  but  /  is  not  bent. 

The  number  of  triangles  sitting  on  any  two  (fixed)  adjacent  vertices  is 
equal  to  e.  We  know  that  e  =  | (Clf  ©  v*)  n  (Clf  ©  Vj)|  (Lemma  8  of  [3]) 


6 


for  any  pair  of  vertices  v*  /  Vj.  We  note  that  e  /  |H/|,  since  the  equality 
prompts  two  eigenvalues  to  become  0.  That  is  not  possible  since  in  that 
case  (see  [12])  the  graph  Gf  cannot  be  strongly  connected.  Thus  e  <  \Llf\. 
There  are  other  restrictions  on  e.  A  simple  corollary  of  Theorem  3.1  is  that 
e  must  differ  from  \Llf\  by  a  perfect  square. 

4  Coloring  the  Boolean  Cayley  Graph 

Assume  that  the  eigenvalues  of  Gf  are  ordered  as  Ai  >  A2  >  •  •  •  >  A„. 

Theorem  4.1.  Let  f  be  a  Boolean  function,  and  let  Gf  be  the  associated 
Cayley  graph  with  g  being  the  multiplicity  of  its  lowest  eigenvalue  A v(Gf). 
Then,  min {5+  1,1  -  <  x(Gf)  <  l^/l  (provided  X2 (Gf)  +  0). 

Proof.  The  first  inequality  min  jg  +  1, 1  —  |  <  x(G)  can  be  found  in 

[16],  being  true  for  arbitrary  graphs  G.  Cao  proved  in  [8]  that  the  chromatic 
number  satisfies  x{G)  <  \J T(G )  +  1,  for  any  graph  G,  where  T(G)  is  the 
maximum  sum  of  degrees  of  vertices  adjacent  to  any  vertex  v  (that  is,  the 
maximum  number  of  2-walks  in  G).  When  G  =  Gf,  since  Gf  is  fly-regular, 
then  T(Gf)  =  |H/|2,  so  we  get  x{Gf)  <  |fi/|  +  1.  By  Wilf’s  theorem  [26], 
the  equality  x(Gf)  =  |fl/|  +  1  holds  if  and  only  if  Gf  is  a  complete  graph  or 
an  odd  cycle.  Since  Gf  is  neither,  we  obtain  x(Gf)  <  |fl/|-  □ 

Corollary  4.1.  With  the  notations  of  the  previous  theorem,  assum¬ 
ing  that  Gf  is  a  strongly  regular  (connected)  graph,  with  e  =  d,  then 

m9X{2’1  + 

Proof.  The  corollary  follows  easily  observing  that  under  the  imposed  condi¬ 
tions  v  =  3,  A3  =  — A2.  Using  Theorem  4.1  (with  g  >  1),  Hoffman’s  famous 
bound  on  the  chromatic  number  x(Gf)  >  1  —  (cf.  [17]),  and  Theorem 

3.1,  we  get  the  result.  □ 

One  cannot  get  better  bounds  by  using  the  fact  that  Gf  (for  /  a  bent 
function)  is  always  a  Ramanujan  graph.  Recall  that  a  graph  is  Ramanujan 
if  it  is  r-regular  and  all  eigenvalues  7^  r  are  <  2 \Jr  —  1.  That  certainly 
is  the  case  here  since  r  =  |fly|  and  the  eigenvalues  in  absolute  value  are 
y/\£lf  \  -e  <  2y/\nf\  -  1.  If  Gf  is  connected  and  non-bipartite,  r-regular 
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then  x(Gf)  >  ~  2  (see  [13]).  However,  this  bound  is  not  better 

than  the  one  obtained  by  Corollary  4.1. 


5  Avalanche  features  of  the  Cayley  graphs 

In  [24,  25]  it  was  proved  that  a  Boolean  function  /  depends  on  the  variable 
xt  linearly  if  and  only  if  the  Walsh  transform  of  /( u)  =  (— l)^u^  is  0,  that 
is,  W(f)(u)  =  0  for  all  u  with  the  zth  component  ut  =  0.  Using  the  known 
relationship  between  the  Walsh  transform  of  /  and  /, 

W(f)  (u)  =  —2W (/)  (u)  +  2nS(u) ,  on  Vn  (3) 

where  <5(u)  =  1  if  u  =  0  and  0  otherwise,  it  is  rather  easy  to  deduce  the 
following  result. 

Proposition  5.1.  A  Boolean  function  f  depends  on  a  variable  Xi  linearly  if 
and  only  if  the  eigenvalues  for  the  Cayley  graph  Gf,  Ao  =  2n_1  and  Xj^o  =  0- 
ifb(j)  has  its  i-th  component  equal  to  0. 

We  call  a  function  /  on  Vn  £-order  correlation-immune  (£  —  Cl)  if  its 
Walsh  transform  satisfies  W(/)(v)  =  0  for  all  1  <  wt(v)  <  £.  If,  in  ad¬ 
dition,  W (f)(0)  =  0,  then  /  is  called  t- resilient .  We  derive  the  following 
characterization  of  these  properties  in  terms  of  graph  spectra. 


Proposition  5.2.  A  function  f  onYn  is  l— Cl  if  and  only  if  the  eigenvalues 
of  the  associated  Cayley  graph  Gf  satisfy  Xi  =  0  for  all  i  with  1  <  wt(h(i))  < 
l.  Further,  f  is  i- resilient  if  and  only  if  Xi  =  0  for  all  1  <  wt(h(i))  <  £  and 
X0  =  2n-\ 

Proof.  We  know  that  A j  =  W(f)(b(i)),  for  any  0  <  i  <  2n  —  1.  Using  the 
definition  of  the  £  —  Cl  functions  and  equation  (3)  we  derive  the  result.  □ 


Corollary  5.3.  For  an  unbalanced  l-CI  function  f,  there  are 
eigenvalues  ofGf. 


zero 


One  can  compute  the  Walsh  spectrum  by  using  /  =  HnW(f),  and 
W(f)  =  2 ~nHnf.  Recall  that  the  Sylvester-Hadamard  matrix  Hn  is  de¬ 
fined  as  Hi  =  ( |  1  )  and  Hn  =  (  ^Tn  l  1  )  ,  that  is,  Hn  is  the 

— 1/  \Bn-i  —nn~\) 
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Kronecker  product  Hn  =  H\  <g>  Hn_  We  show  the  following  result  (this 
was  also  proved  by  McFarland,  cf.  [14]). 

Theorem  5.1.  If  H  =  Hn  is  the  Sylvester-Hadamard  matrix  with  entries 
(— l)VrVJ  ,  where  Vi,Vj  are  the  vectors  ofYn,  then 

HAfH 1  =  2  nD, 

where  D  is  the  diagonal  matrix  formed  by  the  eigenvalues  of  Af. 

Proof.  Since  HH1  =  2n/2ri,  it  suffices  to  show  that 

HAf  =  DH.  (4) 

Now,  for  H  =  ( hij )  and  Af  =  (ajj),  the  left-hand  side  is 

2"  2 11 

( HAf)i,j  =  hi’iaid  =  ©  vi) 

i=i  i=i 

2n 

=  Y(-i)vv{''i(BVj)+Vi'Vj  f(vi  ©  vi) 

i=i 

=  (-dv'-vj  E  (-i)v,x/(x) 

XSVn 

=  VjW(f)(vi)  =  (— l)Vi'Vj  Aj. 

□ 

Let  /  be  a  Boolean  function  on  Vn  and  assume  that  /( 0)  =  0.  Moreover, 
assume  that  Gf  is  connected.  Bernasconi  and  Codenotti  [5]  proved 

Theorem  5.2.  The  graph  Gf  is  bipartite  if  and  only  if  the  Yn  \  ilf  contains 
a  subspace  of  dimension  n  —  1. 

Let  now  Sq  be  a  subspace  of  dimension  n—  1  of  basis  {a^l\a^2\  . . . ,  oln-1)}. 
Complete  the  previous  basis  with  ay1'  to  get  a  basis  for  Yn.  Let  b  be  the 
unique  solution  in  Yn  of  the  system: 
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Let  w  e  Yn.  Since  /  is  0  on  So,  we  have 

w(/)(W©b)=  ^  (— ir(w®b)/(x)  =  ^  ( i)xw(  i)xb/ (x) . 

xeVn  xeVn\So 

Furthermore,  since  b  is  the  solution  to  (5)  and  x  fL  So  is  a  linear  combination 
of  the  vectors  c^1), . . . ,  al'n'1  (with  a ^  always  present),  we  get  (— l)x'b  =  —1, 
and  the  following  result  is  proven  [5]. 

Theorem  5.3.  If  b  is  given  by  (5),  then  W(f)( w)  =  — W(/)(w©b),  for 
any  w  €  Vn. 

Further,  Bernasconi  and  Codenotti  proved  the  following  theorem  [5]  that 
describes  the  propagation  features  of  /  for  all  vectors  with  a  specific  prop¬ 
erty. 

Theorem  5.4.  Let  f  :  Yn  — >  F2  be  a  Boolean  function  whose  associated 
graph  is  bipartite,  and  let  b  e  Vn  given  by  (5).  If  \Llf\  =  2n_2,  then  f 
satisfies  the  PC  w.r.t  all  strings  w  such  that  w  •  b  is  an  odd  integer.  If 
|b|  =  n,  then  f  satisfies  the  SAC. 

The  previous  theorem  seems  to  be  quite  restrictive.  We  prove  a  new 
result  next  that  connects  the  PC  property  with  the  symmetric  difference  in 
counting  vertices  of  Gf. 

Denote  by  A ffx)  the  set  of  vertices  adjacent  to  a  vertex  x  in  the  graph 
Gf.  For  easy  writing,  we  write  A  *  =  Ab(j).  The  next  result  is  our  main 
theorem  of  this  section. 

Theorem  5.5.  Let  f  :  Yn  — >  IF2  be  a  Boolean  function.  Then  the  following 
statements  are  equivalent: 

1.  f  satisfies  the  PC  w.r.t.  w; 

2.  |A/"(0)  \  jV’(w)  |  +  |jV(w)  \  A/"(0)|  =  2n~1; 

5-  EuevJ-1)^^  =  2nA0  -  22n_2  =  2 nwt(f)  -  22n~2. 

Proof.  It  is  easy  to  see  that  /  satisfies  the  PC  with  respect  to  w  if  and  only 
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if  the  autocorrelation  function 


7( 


rt  w  = 


y~y_i  )/(y)+/(v®w) 


(_l)/(v)+/(vew)  _|_  (_l)/(v)+/(vew) 

yy  |-_2)1+/(vew)  _|_  yy  ^_2^/(v©w) 

v£flf  v0 If 

X  1+  X  (_1) 

ven/nAT(w)  veHj-rWCw) 

+  (-l)+  X  1  =  0- 

v€%fW(w)  vGr2jflA/*(w) 


Thus,  I (jV(O) fW(w))  U (jV(O) rW(w)) I  =  |(AA(0)nAA(w))U(AA(0)rW(w))|. 
Further,  using  the  inclusion-exclusion  principle,  the  previous  identity  is 
equivalent  to 

|7V(0)  n  jV(w)|  +  |jV(0)  U  jV(w)|  =  |jV(0)  n  AA(w)|  +  |AA(0)  U  jV"(w)| 

\Af(0)  D  jV(w)|  +  2n  -  |A/"(0)  U  jV(w)|  =  |jV(0)  nAA(wy|  +  2n 

-  |A/"(0)  U  A/"(w)| 

|jV(0)  U  jV(w)|  —  |jV(0)  n  jV(w)|  =  |A/"(0)  U  jV(w)|  —  |A/"(0)  nAA(w)| 

|A/"(0)  \  jV(w)|  +  |jV(w)  \  jV(0)|  =  2n  -  |JV(0)  \  jV(w)|  -  |jV(w)  \  jV(0)|, 


which  proves  the  first  claim.  Now,  using  the  Wiener-Khintchine’s  Theorem 
(see  [9])  W(r)(w)  =  W(f)2(w),  the  equation  (3)  and  the  autocorrelation 
definition  one  can  deduce  (see  also  [15])  that  /  satisfies  the  PC  w.r.t.  w  if 
and  only  if 

£  (-irwir(/)2(u)  =  o  <=► 

uev„ 

X  (-1)u  wVF(/)2(u)  =  2nW (/)(0,  0, . . . ,  0)  -  22n_2. 

ueVn 

Since  W (/)  (0,  0, . . . ,  0)  is  equal  to  the  number  of  ones  in  the  truth  table  of  /, 
that  is,  the  weight  of  /,  which  is  the  eigenvalue  corresponding  to  (0, 0, . . . ,  0), 
we  get  the  last  claim.  □ 
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6  Sensitivity  of  Hamming  Weight  of  /  to  SpeciGj ) 

We  know  that  a  strongly  regular  Cayley  graph  Gf  with  the  extra  condition 
e  =  d  corresponds  to  a  Boolean  bent  function  /.  Is  there  any  influence  of 
arbitrary  Cayley  graph  spectra  on  the  weight  (or  nonlinearity)  of  /?  We 
can  only  prove  the  following  theorem  and  its  corollary  in  this  direction. 


Theorem  6.1.  Let  f  be  a  Boolean  function  defined  on  Yn.  If  Gf  is  con¬ 
nected  and  its  spectrum  Spec(Gf )  contains  exactly  m+ 1  distinct  eigenvalues 
(m  <  n/2),  then 

n  <  log2  ^  , 

where  r  =  wt(f). 

Proof.  We  know  that  if  \Spec(G f)\  =  m  +  1,  then  the  diameter  of  Gf  is 
<  m  (cf.  [12,  Th.  3.13,  p.  88]).  Thus,  for  any  w  €  Vn  \  1 If,  there  is  a 
constant  number  of  strings  €11/  such  that  w  =  The  number 

of  such  strings  is  less  than  or  equal  to  m,  say  p.  It  follows  that  writing 
w  =  J2'j=icj'w^\  cj  £  IF 2 5  exactly  p  coefficients  are  nonzero.  Thus,  the 
number  of  elements  of  Yn  \  11/  is  less  than  or  equal  to  the  number  of  ways 
of  choosing  p  nonzero  coefficients  out  of  r.  Thus,  2 n  —  r  <  (p  <  (p)  (since 
m  <  n/2).  The  result  follows  easily.  □ 


Corollary  6.1.  If  the  Cayley  graph  associated  to  a  Boolean  function  f  is 

—  1  _|_  y/2n+3  +  1 

connected  and  strongly  regular,  then  wt(f)  >  - - - . 


Proof.  If  Gf  is  connected  and  strongly  regular,  then  the  number  of  distinct 
eigenvalues  is  m  =  3.  Therefore,  the  diameter  of  Gf,  diam(Gf )  is  <  2. 
If  diam(Gf)  =  1,  then  Gf  is  complete,  but  then  we  would  have  only  two 
distinct  eigenvalues.  So  diam(Gf )  =  2.  Therefore,  any  w  €  Yn  \  H/  can  be 
written  as  a  sum  of  two  elements  in  12/.  Writing,  as  before,  w  = 
it  follows  that  exactly  two  coefficients  are  nonzero.  Therefore, 


2n  —  r  < 


r(r+  1)  >  2n+1  <*=*►  r  > 


-1  +  v/2n+3  +  1 
2 


thus  proving  the  corollary. 


□ 
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The  author  challenges  the  reader  to  find  further  indicators  of  a  Boolean 
function  that  are  more  sensitive  to  Spec(Gf). 
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